aboutsummaryrefslogtreecommitdiff
path: root/src/or/policies.c
Commit message (Collapse)AuthorAge
* Create routerparse.hSebastian Hahn2010-07-27
|
* Create policies.hSebastian Hahn2010-07-27
|
* Create dirserv.hSebastian Hahn2010-07-27
|
* Create config.hSebastian Hahn2010-07-27
|
* Make the controller act more usefully when GETINFO failsNick Mathewson2010-07-18
| | | | | | | | | | | Right now it says "552 internal error" because there's no way for getinfo_helper_*() countries to specify an error message. This patch changes the getinfo_helper_*() interface, and makes most of the getinfo helpers give useful error messages in response to failures. This should prevent recurrences of bug 1699, where a missing GeoIPFile line in the torrc made GETINFO ip-to-county/* fail in a "not obvious how to fix" way.
* Merge remote branch 'origin/maint-0.2.1'Nick Mathewson2010-02-27
|\ | | | | | | | | | | Conflicts: src/common/test.h src/or/test.c
| * Update Tor Project copyright yearsNick Mathewson2010-02-27
| |
* | Speed up the execution of exit_policy_is_general_exit_helper()Sebastian Hahn2010-02-09
| | | | | | | | | | It isn't necessary to walk through all possible subnets when the policy we're looking at doesn't touch that subnet.
* | 0/8 doesn't count as a /8 subnet towards an Exit flagSebastian Hahn2010-02-08
| |
* | Trivial doc fix for exit_policy_is_general_exit_helperNick Mathewson2010-02-03
| | | | | | | | | | The original comment said what it did if there was at least one /8 that allowed access to the port, but not what it did otherwise.
* | Don't assign Exit flag incorrectlySebastian Hahn2010-02-03
| | | | | | | | | | | | | | | | | | | | exit_policy_is_general_exit() assumed that there are no redundancies in the passed policy, in the sense that we actively combine entries in the policy to really get rid of any redundancy. Since we cannot do that without massively rewriting the policy lines the relay operators set, fix exit_policy_is_general_exit(). Fixes bug 1238, discovered by Martin Kowalczyk.
* | remove redundant validate_addr_policies() checksRoger Dingledine2010-01-15
| |
* | *_free functions now accept NULLSebastian Hahn2009-12-12
| | | | | | | | | | | | | | | | Some *_free functions threw asserts when passed NULL. Now all of them accept NULL as input and perform no action when called that way. This gains us consistence for our free functions, and allows some code simplifications where an explicit null check is no longer necessary.
* | Fix bug 1113.Karsten Loesing2009-10-27
|/ | | | Bridges do not use the default exit policy, but reject *:* by default.
* Avoid a memory corruption problem related to "private" in DirPolicy.Nick Mathewson2009-06-05
| | | | This is a posible fix for bug 996.
* Spell-check Tor.Nick Mathewson2009-05-27
|
* Update copyright to 2009.Karsten Loesing2009-05-04
|
* Log cached-at-exit exit policies to try to fix bug 672.Nick Mathewson2009-03-09
| | | | svn:r18827
* Remove svn $Id$s from our source, and remove tor --version --version.Nick Mathewson2009-01-04
| | | | | | | | The subversion $Id$ fields made every commit force a rebuild of whatever file got committed. They were not actually useful for telling the version of Tor files in the wild. svn:r17867
* Switch address comparisons in policies to be exact rather than semantic. ↵Nick Mathewson2008-12-29
| | | | | | Until we do ipv6 exit policies and until we know whether we even allow ::ffff:0:0/96 addresses, there is no point in doing "semantic" comparisons. This was also showing up on oprofile. svn:r17803
* Refactor some exit-policy-related functions that showed up in oprofile.Nick Mathewson2008-12-29
| | | | | | | | | | Specifically, split compare_tor_addr_to_addr_policy() from a loop with a bunch of complicated ifs inside into some ifs, each with a simple loop. Rearrange router_find_exact_exit_enclave() to run a little faster. Bizarrely, router_policy_rejects_all() shows up on oprofile, so precalculate it per routerinfo. svn:r17802
* Fix most DOCDOCs remaining and/or added by redox.Nick Mathewson2008-12-22
| | | | svn:r17734
* Add DOCDOC comments for all undocumented functions. Add missing *s to other ↵Nick Mathewson2008-12-22
| | | | | | comments so that they will get recognized as doxygen. svn:r17729
* Downlgrade tweak, and answer lots of XXX021s. No actual code fixes in this ↵Nick Mathewson2008-12-18
| | | | | | patch. svn:r17686
* Remove bug 811/845 debugging codeNick Mathewson2008-11-07
| | | | svn:r17199
* Add some debugging logs for bug 811/845.Nick Mathewson2008-11-03
| | | | svn:r17186
* Allow ports 465 and 587 in the default exit policy again. We hadRoger Dingledine2008-09-13
| | | | | | | | | rejected them in 0.1.0.15, because back in 2005 they were commonly misconfigured and ended up as spam targets. We hear they are better locked down these days. svn:r16898
* We should not alter an addr_policy_t that has been canonicalized.Nick Mathewson2008-09-09
| | | | svn:r16802
* Fix a malloc that should have been a tor_mallocNick Mathewson2008-09-05
| | | | svn:r16780
* Fix numerous memory leaks: some were almost impossible to trigger, and some ↵Nick Mathewson2008-09-05
| | | | | | almost inevitable. svn:r16779
* If we are lucky the whitespace nazis will not have noticed these things yetPeter Palfrader2008-08-14
| | | | svn:r16549
* Having a reject-all policy summarized with a lack of summary is stupid. ↵Peter Palfrader2008-08-14
| | | | | | Explicitly mention them as reject 1-65535. svn:r16543
* This bunch of functions really should be staticPeter Palfrader2008-08-14
| | | | svn:r16535
* Fix an overflow when counting rejects for *, truncate exit summaries after ↵Peter Palfrader2008-08-13
| | | | | | 1000 chars svn:r16530
* Think of the poor children in Antarctica who still have to work on 4" screensPeter Palfrader2008-08-13
| | | | svn:r16528
* Also special case "accept 1-65535" case, do not leak in non-exit casePeter Palfrader2008-08-13
| | | | svn:r16526
* Return NULL for policies that do not allow any exitsPeter Palfrader2008-08-13
| | | | svn:r16525
* Fix condition statement for accept items, fix two assertsPeter Palfrader2008-08-13
| | | | svn:r16524
* Make sure we don't run off the end of the listPeter Palfrader2008-08-13
| | | | svn:r16523
* Move policy_summarize() prototype to or.hPeter Palfrader2008-08-13
| | | | svn:r16522
* Create string representation of exit summariesPeter Palfrader2008-08-13
| | | | svn:r16521
* Nickm says I'm going to hell, but if I write that in a comment he might just ↵Peter Palfrader2008-08-13
| | | | | | save my soul svn:r16520
* implement policy_summary_accept and policy_summary_reject together with a ↵Peter Palfrader2008-08-13
| | | | | | set of helpers svn:r16519
* Start with exit policy summariesPeter Palfrader2008-08-13
| | | | svn:r16518
* r17641@31-33-44: nickm | 2008-08-05 16:07:53 -0400Nick Mathewson2008-08-05
| | | | | | | Initial conversion of uint32_t addr to tor_addr_t addr in connection_t and related types. Most of the Tor wire formats using these new types are in, but the code to generate and use it is not. This is a big patch. Let me know what it breaks for you. svn:r16435
* Fix a bug when generating router descriptors: The address part of exit ↵Karsten Loesing2008-08-03
| | | | | | policies was uninitialized. svn:r16372
* r17391@pc-10-8-1-079: nickm | 2008-07-25 17:11:17 +0200Nick Mathewson2008-07-25
| | | | | | | Tor_addr_compare did a semantic comparison, such that ::1.2.3.4 and 1.2.3.4 were "equal". we sometimes need an exact comparison. Add a feature to do that. svn:r16210
* r17346@aud-055: nickm | 2008-07-24 15:37:19 +0200Nick Mathewson2008-07-24
| | | | | | | Make generic address manipulation functions work better. Switch address policy code to use tor_addr_t, so it can handle IPv6. That is a good place to start. svn:r16178
* r15308@tombo: nickm | 2008-04-23 16:46:48 -0400Nick Mathewson2008-04-23
| | | | | | | Free baddir and badexit policy lists on exit. fixes bug 672. only affects authorities. svn:r14431
* r19089@catbus: nickm | 2008-03-27 11:05:23 -0400Nick Mathewson2008-03-27
| | | | | | | Free some static hashtables and the log mutex on exit. Backport candidate. svn:r14212